Christian Neissner wrote:
> Hi Maarten,
>
> That bug seems to be the point because it works well if I request a
> dteam proxy with group attributes. I guess the best solution will be a
> rollback. Thanks.
Actually, Christian, this is not a bug. The documentation clearly
states that the order of the FQANs in the certificate is undefined and
should not be relied upon. If you wish a specific order then you *must*
use the --order option to voms-proxy-init.
This behavior has changed for the version now under certification, but
what the voms-proxy-init you are using does is correct.
Ciao,
Vincenzo
>
> Christian.
>
> [log in to unmask] wrote:
>> Hi Christian,
>>
>>
>>> Recently I installed a VOMS server (glite-VOMS_mysql-3.1.11-0) for a
>>> regional VO. I am also aware of bug #37372 and deployed the
>>> workaround. For testing I enabled a VO with two different groups, but
>>> creating a proxy from a UI the group request is ignored. I always get
>>> all attributes in the same order:
>>>
>>
>> https://savannah.cern.ch/bugs/?38506
>>
>> Users would need to specify the order with the "-order" option.
>>
>> Furthermore, note that the version you installed will not work for:
>>
>> 1. WMS proxy renewal;
>> 2. dCache.
>>
>> A new version has been prepared for certification:
>>
>> https://savannah.cern.ch/patch/?2061
>>
>> It may still be a few weeks before it gets released to production.
>>
>>
|